Whereis Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Whereis Project records in CISA KEV

No Whereis Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Whereis · all components

TI-2018-02766 CVE-2018-3772 · GHSA-wjr4-2jgw-hmv8

MEDIUM 47

Concatenating unsanitized user input in the `whereis` npm module < 0.4.1 allowed an attacker to execute arbitrary commands.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.0276 Published 2018-07-30 Fixed in 0.4.1 CWE-77